Cool :) Works, but it does say there is insecure content on the page so I assume some references must be hardcoded as HTTP.

Ah, it's whining mostly about the Facebook Like plug-in which Chrome has blocked.

It's also moaning about your sig, but there's not much you can about that really.

Yeah, content in signatures will be a problem. Will have to have a think about how to fix that, maybe proxy it through the server.

Does this mean that the NSA won't be able to tell when I'm not wearing my tinfoil hat?

Only if your tinfoil hat is double insulated.